
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier: jJoERFzfgiYNtpRJWM8VhHXKdbUpUtbU5GNwb0mJbBk=
Subject key identifier: 0F:EB:E3:35:E5:6D:7F:73:0E:6B:1B:9C:92:DC:99:9D:63:DB:B9:AE
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number: FD
Signing time: Mon 01 Jun 2026 07:07:46 +0000
Manifest this update: Mon 01 Jun 2026 07:07:46 +0000
Manifest next update: Mon 08 Jun 2026 07:07:46 +0000
Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: 0uc18tQX9g4l3UXXIM+RXDKb3lSpi/YuSr1jb3wbZXI=)
2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=)
3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Validity
Not Before: Jun 1 07:07:46 2026 GMT
Not After : Jun 8 07:07:46 2026 GMT
Subject: CN=6a1d2fc2-25d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:5d:3d:7c:3a:cd:52:c8:1c:94:c1:02:df:
58:b6:23:d7:3a:b3:b8:d5:7f:40:00:8d:56:65:57:
f4:45:17:e9:14:36:5c:3c:4e:87:72:7e:2f:e9:9a:
83:6b:1d:16:17:da:38:83:ce:f5:a6:9f:3a:6c:4a:
85:0a:7c:c8:b1:9d:2f:ff:1f:c3:2b:ba:26:20:da:
8a:74:5a:f9:0e:6d:1e:4b:9a:c4:32:22:d2:d1:2f:
d4:95:47:d2:b7:bc:14:cc:66:90:f3:98:7b:f8:54:
1b:0a:77:4d:6f:2a:7c:14:b8:b2:00:81:09:30:1a:
fb:33:f3:8e:7d:34:85:ea:ce:82:36:c4:5a:42:6e:
de:25:13:f3:fe:97:89:e1:f1:d1:12:9a:c5:55:fa:
af:94:b2:bc:d3:f8:5c:12:db:5e:bb:e2:ea:6b:16:
a4:9a:92:0b:3b:6a:57:98:d3:48:ba:1b:36:cd:e5:
55:b9:e8:8d:f1:79:d9:ae:58:37:44:97:31:63:a3:
60:27:2a:85:f1:a5:c4:5b:44:a5:96:dc:93:9d:02:
90:83:22:99:0c:ab:e3:6e:c0:12:32:da:45:80:82:
ee:5f:9c:3b:da:b0:bc:ae:b7:1b:36:de:24:1f:a8:
89:77:20:1a:74:0c:4f:57:a2:7f:5f:95:15:7c:36:
51:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EB:E3:35:E5:6D:7F:73:0E:6B:1B:9C:92:DC:99:9D:63:DB:B9:AE
X509v3 Authority Key Identifier:
keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:55:b2:24:92:47:ca:f0:94:d9:66:0c:79:d4:e2:36:16:fb:
99:d0:f0:09:a4:8d:d3:dc:52:79:ac:94:ed:9b:44:8c:85:e4:
fd:3c:0a:0f:53:85:ba:64:56:6a:87:19:68:df:5c:d9:e5:2e:
8b:15:71:f3:25:c5:ec:de:98:01:32:9b:20:d5:66:03:e7:b2:
dc:83:07:1b:c4:d9:67:70:a1:fc:24:4c:37:55:ef:7c:3e:39:
c4:7c:21:0e:be:4b:06:da:b2:0f:10:77:44:c1:3e:23:81:be:
9d:02:75:09:d0:54:67:12:e1:e3:37:4e:71:63:71:7b:99:44:
34:1b:93:bc:52:75:3e:07:b9:1f:aa:84:fa:00:ac:ab:07:37:
51:d7:67:cd:7c:bd:96:d7:ba:b8:4e:61:bb:24:09:46:03:80:
ca:9b:66:88:da:b0:11:23:c1:0c:02:a5:09:b1:51:a9:46:da:
1f:c8:a1:07:b7:51:c0:d4:bc:8e:4e:75:5b:81:33:6f:d3:5c:
ca:02:21:45:ca:ac:67:d5:db:63:6c:07:c0:5d:b0:4f:e0:3e:
bc:45:24:24:4f:8d:7d:e9:9a:ae:4c:7f:a2:0f:c5:ea:53:12:
19:cf:ea:55:c7:6f:88:fa:29:a9:fd:6c:52:f7:6d:a8:e7:33:
f0:46:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:57 2026 by rpki-client